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1 Introduction 

Let E be an elliptic curve over Q of conductor N. Since E is modular |3J, there exists a 
surjective map n : X 0 (N) —> E defined over Q. There is a unique such map of minimal 
degree (up to composing with automorphisms of E), and its degree mg is known as the 
modular degree of E. In m the parity of was determined for a very particular explicit 
class of elliptic curves, namely, the Neumann-Setzer curves, which have prime conductor 
and a rational 2-torsion point. (See also the remark following theorem 15.11 below.) We 
study the question more generally for arbitrary elliptic curves E/ Q, and prove the following 
theorem: 

1.1 Theorem. If E/ Q is an elliptic curve of odd modular degree then: 

1. the conductor N of E is divisible by at most two odd primes, 

2. E is of even analytic rank, and 

3. either 

(a) E has a rational point of order 2 (or equivalently, admits a rational 2-isogeny), 

(b) E has prime conductor and supersingular reduction at 2, and Q(2T[2]) is 
totally complex ( equivalently, E( R) is connected ), or 

(c) E has complex multiplication, and N = 27,32,49, or 243. 

1.2 Example. The following examples of elliptic curves with odd modular degree should 
serve to illustrate conditions (3a), (3b) and (3c). The curve V 0 (15) has modular degree 
one and a rational two torsion point, and thus satisfies condition (3a). Another example 
is given by the curve 

y 2 + xy = x 3 — x 2 — 58x — 105 
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(2537 E in Cremona’s tables) of conductor 43 • 59 with modular degree 445 and torsion 
subgroup Z/4Z. The curves X 0 (ll) and X 0 (19) both have modular degree one and satisfy 
condition (3b). An example of larger conductor is given by 

y 2 + y = x 3 + x 2 — 4x — 10 

of conductor 24859 and modular degree 3979. Finally, there are exactly four curves of 
odd modular degree with complex multiplication, namely X 0 (27), X 0 (32), X 0 (49) (all of 
modular degree one) and 

y 2 + y = x 3 + 2 

of modular degree 9, conductor 243 and j-invariant 0. 

1.3 Remark. Each of the conditions appearing in theorem I I .71 is invariant under isogeny, 
other than the condition that E( R) be connected, which however is invariant under isoge- 
nies of odd degree. Since the modular parameterization of E factors through the optimal 
member of the isogeny class of E (that is, the member of its isogeny class having mini¬ 
mal modular degree; in older terminology, a strong Weil curve), it is therefore no loss of 
generality in the proof of theorem I I. 11 to assume that E is optimal. 

1.4 Remark. Cremona and Watkins have computed the modular degree of all optimal 
elliptic curves of conductor < 25,000 [2j and these computations suggest that there may 
be even stronger limitations on the conductor of a curve of odd modular degree than those 
imposed by theorem 11.11 Indeed, in the range of Watkins’ computations, every curve of 
odd modular degree has conductor divisible by at most two primes, and the conductor 
always has one of the following forms: 2 p, 4 p, or pq, where p and q are odd primes. 

1.5 Remark. The statement of the theorem regarding the analytic rank of E is consis¬ 
tent with the rank conjecture of Watkins m conj. 4.1] (and the conjecture of Birch and 
Swinnerton-Dyer). 

The following result, conjectured by Watkins (J2H conj. 4.3], f2T s conj. 4.2]), is a simple 
consequence of theorem I I .11 (see lemma E2): 

1.6 Theorem. Let E/ Q be an elliptic curve of prime conductor N, and suppose that E 
is neither a Neumann-Setzer curve, nor X 0 (17) ( equivalently, E does not have a rational 
2-torsion point). If uie is odd, then N = 3 mod 8. 

One technique for proving that an elliptic curve E has even modular degree is to show 
that the map n factors through X 0 (N)/w for some non-trivial Atkin-Lchner involution w. 
We use this approach in section 2 to prove theorem 12.11 which in turn implies parts (1) 
and (2) of theorem I I .11 and shows that (3a) holds if N is divisible by at least two primes. 
It remains to prove (3) in the case when N is a prime power. The most difficult case 
to handle is when N is actually prime, and in this case we deduce theorem 11.11 from the 
following result, proved in section 3. 
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1.7 Theorem. Let N be prime, let T denote the Hecke algebra over Z acting on weight 
two cusp forms on T 0 (N), and let m be a maximal ideal of T such that T/m = F 2; and such 
that the associated semi-simple Galois representation p m : G q —> GL 2 (F 2 ) is irreducible. 
If the completion T m = Z 2 , then 

1. p is supersingular at 2, and 

2. p is totally complex. 

The relevance of this result to theorem o is that, since N is prime in the context of 
theorem H~71 a result of Ribet shows (assuming, as we may, that E is optimal) that 
the modular degree of E is even if and only if 2 is a congruence prime for the newform of 
level N attached to E. 

The proof of theorem 11.71 is motivated by the following considerations: If p is an odd 
prime and p : G q —> GL 2 (F p ) is a surjective modular representation, then theorems of 
Wiles and Taylor-Wiles [291 125] show that the universal minimal deformation ring R$ 
attached to p is isomorphic to the universal minimal modular deformation ring T 0 (= T m , 
since N is prime). Since Tg is a finite W( F p ) = Z p algebra with residue field F p , it is 
exactly equal to Z p if and only if it is an etale Z p -algebra. On the other hand, since 
Rid = Tg, this is equivalent to R% being etale over Z p , which is in turn equivalent to the 
reduced Zariski cotangent space of being trivial. Since by construction /?,g represents 
the minimal deformation functor, its reduced Zariski cotangent space considered as a set 
has cardinality equal to the number of minimal deformations 

P : Gq —> GL 2 (F p [x]/(a; 2 )) 

of p. Thus to prove that T m 7 ^ Z p it suffices to show that there exists a non-trivial minimal 
deformation of p to GL 2 (F p [x]/(x 2 )). 

In spirit, the proof of theorem 11.71 follows this strategy; in other words, we determine 
whether or not T m = Z 2 by a calculation on tangent spaces. A significant problem arises, 
however, since we are working in the case p — 2, whilst the method of Wiles and Taylor- 
Wiles applies only to p > 2. This is not a mere technical obstruction; many phenomena 
can occur when p = 2 that do not occur for odd p. To name two such: the possible failure 
of T m to be Gorenstein and the consequent failure of multiplicity one and the fact that 
p can arise from a totally real extension of Q. Calculations in the second case suggest that 
the Taylor-Wiles strategy for proving R = T in the minimal case will not work without 
some significant new idea, since the numerical coincidences that occur for odd p whilst 
balancing the Selmcr and dual Selmer groups in the Greenberg-Wiles product formula 
(see for example the remarks of de Shalit (5), top of p. 442) do not occur in the case p = 2 . 
Mark Dickinson ra has proved an R = T theorem for p = 2; however, his result requires 
many non-trivial hypotheses, and indeed does not apply to any of the representations 
considered in theorem P (Its main application to date has been to representations with 
image SL 2 (F 4 ) ~ A 5 .) The issue here is that the Taylor-Wiles auxiliary prime arguments 
fail when p = 2 and the image of p is dihedral. 
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Thus, instead of appealing to any general modularity results, we show that T m is bigger 
than Z 2 by explicitly constructing (in certain situations) non-trivial deformations of p m to 
F 2 [a:]/(a: 2 ) that are demonstrably modular (and hence contribute to the reduced cotangent 
space of T m ). The most difficult point is to show that these deformations are modular of 
the correct (minimal) level. We prove this via a level-lowering result for modular forms 
with values in Artinian Z 2 -algebras Theorem Id. 181 below 1. This level lowering result may 
be of independent interest; for example, it provides evidence that an R = T theorem should 
hold for those p of characteristic two to which it applies. 

The proof of (3) when N is a prime power (but is not actually prime) is given in 
section 4. In section 5 we make some concluding remarks. 

Let us close this introduction by pointing out that recently Dummigan m has provided 
a heuristic explanation for Watkins’ rank conjecture that also relies on a hypothetical 
R — T theorem for the residual Galois representation p arising from the 2-torsion on an 
elliptic curve E\ he uses the symmetric square map from p to Sym 2 p to lift elements from 
2-Selmer group of E to the tangent space to the deformation ring of p. He also shows that 
the resulting tangent space elements can never be “trapped” (in the words of J2H, p. 450]) 
by the Taylor-Wiles method of introducing auxiliary primes. 

Altogether, the experimental work of Watkins on the parity of modular degrees, taken 
together with the results of this paper and of m , suggests the validity of an R = T theorem 
for (at least certain) residual Galois representations arising from the 2 -torsion on elliptic 
curves, a theorem whose proof, however, seems out of reach of the current techniques. 

2 N composite with at least two distinct prime factors 

In this section we prove the following theorem. 

2.1 Theorem. If E is an elliptic curve of odd modular degree then the conductor N of E 
is divisible by at most two odd primes, and E is of even analytic rank. Furthermore, if N 
is divisible by at least two primes, then E contains a rational 2-torsion point. 

We begin with a preliminary lemma. Let E be an elliptic curve over a field k ; let O 
denote the origin of E. We let A denote the group of automorphisms of A as a curve over 
k (i.e. fc-rational automorphisms of E that do not necessarily fix O ), and suppose that W 
is a finite elementary abelian 2 -subgroup of A. 

2.2 Lemma. The order ofW divides twice the order of E[2](k). 

Proof. Let Aq denote the subgroup of A consisting of automorphisms of E as an elliptic 
curve over k (i.e. fc-rational automorphisms of E that do fix O ). The action of E{k ) on E 
via translation realizes E{k) as a normal subgroup of A which has trivial intersection with 
A 0l and which together with A 0 generates A. Thus A sits in the split short exact sequence 
of groups 

0 -> E{k) -> A -> A 0 —f 1. (1) 
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(This is of course well known. The surjection A —» Ao may also be regarded as the map 
A = Aut(.E) —> Aut(Pic°(£')) induced by the functoriality of the formation of Picard 
varieties — the target being the group of automorphisms of Pic °(E) as a group variety - 
once we identify E and Pic°(FI) as group varieties in the usual way.) 

The short exact sequence m induces a short exact sequence 

0 -> W n E(k) ->W->W 0 ->1, 

where Wq denotes the projection of W onto Aq. The known structure of Ao shows that 
W 0 is either trivial or of order 2. Since W fl E(k) C E[2](k), the lemma follows. □ 

Proof of theorem mu The discussion of remark Q shows that it suffices to prove the 
theorem under the additional assumption that E is an optimal quotient of Xq(N). 

Let W denote the group of automorphisms of Xq(N) generated by the Atkin-Lehner 
involutions; W is an elementary abelian 2-group of rank equal to the number of primes 
dividing N. Since E is an optimal quotient of X 0 (N), the action of W on X 0 (N ) descends 
to an action on E. If w E W were to act trivially on E , then the quotient map X 0 (N) —> E 
would factor through X 0 (N)/w, contradicting our assumption that E is of odd modular 
degree. Thus lemma 12.21 shows that W has order at most 8, and hence that N is divisible 
by at most 3 primes. Furthermore, if N is divisible by more than one prime, then it shows 
that if[2](Q) is non-trivial. 

Suppose now that N is odd, so that X 0 (N ) and E both have good reduction at 2. We 
may then apply the argument of the preceding paragraph over F 2 , and so conclude from 
lemma P that W has order at most 4. Hence N is divisible by at most two primes. 

If E is of odd analytic rank, and if Je denotes the normalized newform of level N 
attached to E , then w^Je = Ie, and so the automorphism of E induced by has 
trivial image in A 0 . Thus acts on E via translation by an element P G E( Q). Since 
wn interchanges the cusps 0 and 00 on X 0 (N), we see that P = 7r(0) — 7r(oo) (where 
7 r : Xq(N) —> E is a modular parameterization of E, chosen so that 7r(oo) = O). 

The assumption that E has odd analytic rank also implies that L(fz, 1) = 0. Since this 
L-value can be computed (up to a non-zero factor) by integrating /# from 0 to 00 in the 
upper half-plane, we conclude that P = O, and thus that wn acts trivially on E. Hence 7 r 
factors through the quotient X 0 (N)/wn of X 0 (N), and so must be of even modular degree, 
a contradiction. □ 


3 N prime 

3.1 Reductions 

3.2 Lemma. Theorem E3 implies part (3) of theorem, I ?. /I for N prime. 

Proof. Suppose that E is an elliptic curve of conductor N, assumed to be optimal in its 
isogeny class. Let ff be the associated Hecke eigenform of level To(IV) and weight 2. From 
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a theorem of Ribet [20], 2 |the if and only if Je satisfies a congruence with another cuspidal 
eigenform of level N. The set of cuspidal eigenforms (in characteristic zero) congruent to 
/ is indexed by Hom(T m <S> Q 2 ,Q 2 )- Thus /# satisfies no non-trivial congruences if and 
only if T m G> Q 2 = Q 2 , or equivalently if and only if T m = Z 2 . □ 

The following lemma shows that it is possible to detect congruences from modular forms 
modulo two. 

3.3 Lemma. Let m be the maximal ideal in T associated to p, and suppose there exist two 
distinct non-zero q-expansions f, g with coefficients in F 2 such that m 2 f = m 2 g = 0. Then 

T m ^Z 2 . 

Proof. Since p is irreducible, / and g are both cuspidal. If T m = Z 2 , then (m 2 ,2) = m. 
Thus / and g are both g-expansions which are killed by m. By multiplicity one for q- 
expansions m prop. 9.3] it follows that / = g. □ 

Of use to us will be the following theorem of Grothendieck on Abelian varieties with 
semistable reduction na Expose IX, prop. 3.5]: 

3.4 Theorem (Grothendieck). Let A be an Abelian variety over Q with semistable 
reduction at i. Let Ie C Gal(Q/Q) denote a choice of inertia group at £. Then the 
action of If on the p n -division points of A for p ^ £ is rank two unipotent; i.e., as an 
endomorphism, for a £ Ie, 

(a - 1 ) 2 A\p n ] = 0. 

In particular, I( acts through its maximal pro-p quotient, which is procyclic. 

Shimura proved that a modular form / of weight 2 and level T 0 (N) gives rise to a 
modular Abelian variety Af in such a way that the p-adic representations p/ attached to 
/ arise from the torsion points of Af. For prime N, these varieties are semistable at N, 
and so we may apply the theorem above to deduce that for p = 2 , such representations 
p restricted to In factor through a pro-cyclic 2-group. For representations p with image 
inside GL 2 (F 2 ) — S 3 , this means in particular that the order of inertia at N is either 1 
or 2 . 

Let us now consider a Galois representation p : G q —> GL 2 (F 2 ), arising from a cuspidal 
Hecke eigenform of level N, whose image is not contained in a Borel subgroup. (This is 
equivalent to p being irreducible, and also to the image of p having order divisible by 3.) 
Let L be the fixed field of the kernel of p; the extension L/ Q is unramified outside 2 and 
N. If L/ Q is unramified at N then p has Serre conductor 1, contradicting a theorem of 
Tate [25] . Thus by the discussion above we see that inertia at N factors through a group 
of order 2, that L/ Q is an ^-extension, and (hence) that p is absolutely irreducible. Let 
K/Q be a cubic subfield of L, and let F be the quadratic extension inside L. Since p 
is finite flat at 2, it follows from Fontaine’s discriminant bounds m that the power of 
2 dividing the discriminant of Ff Q is at most 4. Thus F/ Q must be Q(V=L N) (as it is 
ramified at N ). The extension L/F is unramified at the prime above N and is ramified at 
2 if and only if p is supersingular. 
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3.5 Lemma. If p is supersingular at two and not totally real then N = 3 mod 8 . In 
particular, theorem ! 1. 1\ implies theorem ! 1. (A 

Proof. By class field theory the quadratic field F /Q admits a degree three extension 
ramified precisely at 2 only if 2 is unramified and inert in F. This occurs if and only 
if N = 3 mod 8 and F = Q ( \J—N) , or N = 5 mod 8 and F = Q (VN). Moreover if 
F = Q(VN) then K and L are totally real. □ 

We shall prove theorem 11.71 by showing in the following subsections that if p satisfies 
at least one of the following conditions: 

1 . p is totally real; 

2 . p is unramified at 2 ; 

3. p is ordinary, complex, and ramified at 2; 
then T m 7 ^ Z 2 . 

3.6 /1 is totally real 

The theory of modular deformations is not well understood when p is totally real. Thus our 
arguments in this section are geometric. We use the following theorem, due to Merel m 
prop. 5]. (This interpretation of Merel’s result is due to Agashe jU cor. 3.2.9]). 

3.7 Theorem. Let N be prime. Then J 0 (N){H) is connected. 

If we let g denote the dimension of J := Jo(N) it follows that J(R) ~ (R/Z) 9 , 
J(R) tors ~ (Q/Z ) 9 and J[2](R) = (Z/2Z) 9 . 

Let J[2°°] = lim J[2 m ], Then J[2°°] is a 2-divisible group over Q admitting an action 
of T 2 . 

Since To is hnite and flat over the complete local ring Z 2 there exists a decomposition 

T 2 = no¬ 
where the product is taken over the maximal ideals m of T of residue characteristic two. 
If g( m) denotes the rank of T m over Z 2 , then 

^2 g(m) = rank(T 2 /Z 2 ) = g. 

m 

If Jfm 00 ] := J[ 2 °°] (g) T2 T m , then J[ 2 °°] ~ El ^[ m0 °] (compare [TH] §7, p. 91). From 
lemma 7.7 of Pi we see that Ta m J 0 Q 2 is free of rank two over T m 0 Q 2 (where Ta m J := 
Hom(Q 2 /Z 2 , J[m°°](Q)) is the m-adic Tate module of J), and thus that 

J[m°°](C) = (Q 2 /Z 2 ) 29 ^ m ^. (2) 

Let J[2] m := J[2] 0 t 2 T m be the 2-torsion subgroup scheme of J[m°°]. 
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3.8 Lemma. For all maximal ideals m of residue characteristic two there is an equality 

dim z/2Z (J[2] m (R)) = g(m) 


Proof. The isomorphism (J2J induces an isomorphism J[2] m (C) = (Z/2Z) 29 ^ m \ Let 
cr e Gal(C/R) denote complex conjugation. Then (cr — l) 2 J[2] m (C) = 0. Thus J[ 2 ] m (R) 
(which is the kernel of cr — 1) has dimension at least p(m). If dim z / 2Z ( J m [2](R)) > p(m) 
for some m, then since 

J[2](R) = nr[2] m (R). 

and since (as was noted above) dim z / 2 Z (J[2](R)) = g , we would deduce the inequality: 

g = ^dirn z/ 2 Z (J[2] m (R)) > ^g(m) = g, 


which is absurd. □ 

Now let p be a totally real (absolutely) irreducible continuous modular representation 
of Gal(Q/Q) into GL 2 (F 2 ) of level T 0 (IV), and let m be the corresponding maximal ideal 
of T. The main result of [2J shows that the Gal(Q/Q)-representation J[m](Q) is a direct 
sum of copies of p. Thus, since p is totally real, we find that 

dim Z/2Z J[m](R) = dim z/2Z J[m](C) > dim z/2Z p = 2. 

Combining this inequality with the inclusion J[m](R) C J[2] m (R) and lemma l3~Hl we find 
that p(m) > 2, and thus that T m ^ Z 2 . 

3.9 ~p is unramified at 2 

Suppose that L /Q is unramified at 2. This forces p to be ordinary. By the theory of 
companion forms [13] one expects that p arises from a mod 2 form of level T^IV) and 
weight 1. Although the results of m do not apply in this case, Wiese EH! explicitly 
constructs such forms when the image of p is dihedral, as it is in our situation. (In fact 
the only difficult point of Wiese’s construction is the case when p is totally real, and this 
case of theorem m is already covered by section 13.61 1 Let / be this companion (Katz) 
modular form of weight one modulo 2. Let A be the Hasse invariant modulo 2, which 
is a modular form of level one with q expansion given by 1. Then Af = f and g = f 2 
are two distinct g-expansions modulo 2 of weight 2 and level N. Moreover, one sees that 
(Ti — ae)f = (Ti — af)g = 0 for all odd £, and that (T 2 — a 2 )/ = 0 and (T 2 — a 2 ) 2 g = 0. 
Thus m 2 f = vcrg = 0 and therefore by lemma fTTH T m ^ Z 2 and we are done. 


3.10 p is ordinary, complex, and ramified at 2 

Suppose that p is ordinary, complex, and ramified at 2. It follows that F/Q is complex 
and ramified at 2, and thus that F = Q(a J—N) for some N = 1 mod 4. Moreover, the 
extension L/F is unramified everywhere. Since N = 1 mod 4 it follows that H := L(v — 1) 
is also unramified everywhere over F. The field H is Galois over Q, and clearly 

Gal(tf/Q) ~ S 3 x Z/ 2 Z. (3) 

We may embed S 3 x Z/2Z into GL 2 (F 2 [a;]/(:r 2 )) by fixing an identification of S 3 with 
GL 2 (F 2 ), and mapping a generator of Z/2Z to the matrix 

fl + x 0 \ 

V 0 1 + xJ ' 

Composing the isomorphism © with this embedding yields a representation: 

p : Gal(if/Q) — GL 2 (F 2 [a;]/(a; 2 )). 

The representation p has trivial determinant (equivalently, determinant equal to the mod 
2 cyclotomic character). We also claim that p is finite flat at two. To check this, it suffices 
to prove this over Z!f. The representation p|Gai(Q.,/Q ur ) factors through a group of order 2, 
and one explicitly sees that it arises as the generic fibre of the group scheme (D © D)/ Z)f, 
where D is the non-trivial extension of Z/2Z by /i 2 considered in (Prop 4.2, p. 58). 
Thus one expects p to arise from an F 2 [x]/(a: 2 )-valued modular form of weight two and 
level N, corresponding to a surjective map of rings T m —»• F 2 [x]/(a: 2 ). This would follow 
if we knew that T m coincided with the minimal deformation ring associated to p. Rather 
than proving this, however, we shall use weight one forms to explicitly construct a weight 
two modular form giving rise to p. 

Let x' 4 n be the character of conductor AN associated to F. Consider two faithful 
representations 

ifi : Gal(L/Q) = ^3 ^ GL 2 (C), : Gal(i//Q) ^ *S 3 x Z/ 2 Z -»■ GL 2 (C). 

Since Fj Q is complex, these dihedral representations are odd and therefore give rise to 
weight one modular forms hi, h 2 in 5'i(Ti(4IV), Xan)- 

3.11 Lemma. The modular forms hi, h 2 are ordinary at 2, have coefficients in Z, and 
are congruent modulo 2. Let 

9 = e ZM . 

Then g mod 2 is non-zero, and the form h = hi + xg G 5i(Ti(4iV), F 2 [a:]/(a; 2 )) is an 
eigenform for all the Hecke operators, including U 2 . The associated GL 2 (F 2 [a:]/(a; 2 )) Galois 
representation attached to h is p. 
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Proof. The modular forms are both ordinary at 2 because the representations if\ and 
r tp 2 have non-trivial subspaces on which inertia at two is trivial (since J 2 acts through a 
group of order 2). They both have coefficients in Z, since 2 cos( 7 r/ 3 ) G Z. The congruence 
hi = h -2 follows from the fact that both are ordinary-at-2 Hecke eigenforms, and that 
a(hi,£) = a(h 2 ,£)x 4 :(£) for all odd primes £, where xa is the character of conductor 4. 
From this one also sees that g is non-trivial modulo two. The claims about h follow 
formally from the fact that hi and h 2 are Hecke eigenforms that are congruent modulo 2, 
and the definition of p. □ 

Now that we have constructed the weight one form h of level 4N giving rise to p, we 
would like to construct a corresponding weight two form of level N. Multiplying h by the 
Eisenstein series in M 1 (T 1 (4iV), Xan), we see that h is the g-expansion of a modular form 
in S 2 (r 0 (4jV).F 2 [a;]/Or 2 )). Since h is ordinary and is a f / 2 eigenform, we may apply the 
U 2 operator to deduce that h G S' 2 (T 0 (2A r ), F 2 [x]/(a; 2 )). Applying theorem 13.181 (proved 
in the following subsection) we then deduce that in fact h G S' 2 (T 0 (A^), F 2 (r]/(a; 2 )), and 
(thus) that g G S' 2 (T 0 (A^), F 2 ). An easy calculation shows that if / = h\ = h 2 = J2a n q n 
then m/ = 0, whilst mg C F 2 f, and so also m 2 g = 0. Thus T m 7 ^ Z 2 , by lemma 13.31 

3.12 Level-lowering for modular deformations 

The goal of this section is to prove a level-lowering result for modular forms with coefficients 
in Artinian rings that strengthens the case p = 2 of m thm. 2 . 8 ] (which in turn extends 
a level lowering result proved by Mazur [221 thm. 6.1] in the odd prime case). 

We first establish a version of the multiplicity one theorem m thm. 2 . 1 ] for p = 2 . 
Under the additional assumption that p is not hnite at 2, this theorem was proved in 4J 
§2] (as was the corresponding result for odd level). Thus the key point in our theorem is 
that p is allowed to be hnite at 2 , even though the level is taken to be even. 

3.13 Theorem. Let N be an odd natural number, and let T denote the full Z-algebra of 
Hecke operators acting on weight two cuspforms of level 2N. If m is a maximal ideal in 
T whose residue field k is of characteristic 2, and for which the associated residual Galois 
representation 

p: Gal(Q/Q) — GL 2 (k) 

is ( absolutely ) irreducible, ordinary, and ramified at 2, then Ta m Jo(2N ) (the m-adic Tate 
module of J 0 (2N)) is free of rank two over the completion T m . 

To be clear, the condition “ordinary at 2” means that the image of a decomposition 
group at 2 under p lies in a Borel subgroup of GL 2 (fc). Since k is of characteristic 2, we see 
that (for an appropriate choice of basis) the restriction of p to an inertia group at 2 may 
be written in the form 

^ = ((])■ 

The assumption that p is ramified at 2 then implies that * is not identically zero. Thus 
the representation space of p has a unique line invariant under J 2 , and so p is irreducible 
if and only if it is absolutely irreducible. 
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3.14 Lemma. Let k be a finite field of characteristic 2. Ifp: Gal(Q 2 /Q 2 ) —> GL 2 (k) is 
a continuous representation that is finite, ordinary, and ramified at 2, then p has a unique 
finite flat prolongation over Z 2 (up to unique isomorphism). Furthermore, this prolongation 
is an extension of a rank one etale k-vector space scheme by a rank one multiplicative k- 
vector space scheme. 

Proof. Any finite flat group scheme that prolongs an unramified continuous representa¬ 
tion of Gal(Q 2 /Q 2 ) on a one-dimensional fc-vector space is either etale or multiplicative. 
Thus there are a priori four possible structures for a finite flat prolongation of p: etale 
extended by etale; multiplicative extended by multiplicative; multiplicative extended by 
etale; or etale extended by multiplicative. However, all but the last possibility necessar¬ 
ily gives rise to an unramified generic fibre (note that any extension of multiplicative by 
etale must split, by a consideration of the connected etale sequence). Thus, since p is 
assumed ramified, we see that any prolongation of ~p must be an extension of a rank one 
etale k-ve ctor space scheme scheme by a rank one multiplicative fc-vector space scheme. 

To see that such a prolongation is unique, consider the minimal and maximal prolon¬ 
gations M and M' of p to a finite flat group scheme m cor. 2.2.3]. The result of the 
preceding paragraph shows that the natural morphism M —> M' necessarily induces an 
isomorphism on the connected components of the identity, and on the corresponding groups 
of connected components. By the 5-lemma, this morphism is thus an isomorphism, and 
the lemma follows. □ 

We now show that certain results of Mazur jlbj cited in the proof of ffiT. thm. 2.1] 
extend to the case p = 2. We put ourselves in the context of THJ §1], and use the notation 
introduced there. Namely, we let K denote a finite extension of Q p for some prime p, and 
let O denote the ring of integers of K. If A is an abelian variety over K, then we let A/q 
denote the connected component of the identity of the Neron model of A over Spec O. For 
any power p r of p, the p r -torsion subgroup scheme A\p r ]/o of A/o is then a quasi-finite 
flat group scheme over Spec O; we let FA(p r ]/o denote its maximal finite flat subgroup 
scheme, and A[p r ] { j 0 denote the maximal connected closed subgroup scheme of A[p r ]/o- 
Since we took A/o to be the connected component of the Neron model of A, the inductive 
limit FA\p°°} /0 := lim FA[p r ]/o is a p-divisible group, and Afi 00 ] 0 ^ := lim A\p r ]® 0 is the 

maximal connected p-divisible subgroup of FA(p°°]/o. 

The following proposition is a variation on m prop. 1.3], in which we allow the ram¬ 
ification of K over Q p to be unrestricted, at the expense of imposing more restrictive 
hypotheses on the reduction of the abelian varieties appearing in the exact sequence under 
consideration. 

3.15 Proposition. Let 0 —> A ^ B ^ C ^ 0 be an exact sequence of abelian varieties 
over K such that A has purely toric reduction, whilst C has good reduction. Then the 
induced sequence of p-divisible groups 

o - -%”]/o - B(p“]/o - C[p”]/o - 0 
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is a short exact sequence of p-divisible groups over Spec O. Equivalently, for any power p r 
of p, the induced sequence 

0 —> A[p r ]°i 0 —> B\p r fj 0 —> C\p r ]°i 0 —> 0 
is a short exact sequence of finite flat group schemes over Speed 

Proof. Since A has purely toric reduction, the group scheme A[p r ] ( j 0 is of multiplicative 
type for each r. Thus it necessarily maps isomorphically onto its scheme theoretic image 
in B/o, and thus the induced map A[p°°]/ 0 —> B[p°°] is a closed embedding. 

Let C C B be an abelian subvariety chosen so that the induced map C' — > C is an 
isogeny. Then C also has good reduction, and so C'\p°°] 0 , o —> C\p°°] 0 , o is an epimorphism 
of p-clivisible groups over Speed Thus the induced map -B[p°°]/ 0 —> C\p°°] 0 , o is also an 
epimorphism of p-clivisible groups. A consideration of generic fibres shows that the kernel 
of this surjection coincides with the scheme-theoretic image of A[p°° }°/o in B lP°°] 0 /oi and so 
the proposition is proved. □ 

Proof of theorem 13.131 We closely follow the method of proof of [291 thm. 2.1 (ii)] in the 
case when “A( p ) is trivial mod m” (in the terminology of that proof; see [SIU pp. 485-488]). 
If we let A denote the connected part of the kernel of the map Jo (2 A) —> Jo (A) x Jo (A) 
induced by Albanese functoriality applied to the two “degeneracy maps” from level 2A 
to level A, then A is an abelian subvariety of Jo(2A) having purely toric reduction at 2, 
whilst the quotient B of Jo(2A) by A has good reduction at 2. From proposition 13. 151 we 
obtain (for any r > 1) the short exact sequence 

o -> Anu - Mwvnu - sp r ]/z a - o 

of connected finite flat group schemes over SpecZ 2 - By functoriality of the formation of 
this short exact sequence, and since A is a T-invariant subvariety of J 0 (2A), we see that 
this is in fact a short exact sequence of T-module schemes. Localizing at m induces the 
corresponding short exact sequence 

o -> A{2 r t,z 2 - Jo(2iV)[2f m/Z2 B\ 2 r ]“ /Zj 0. (4) 

Passing to Q 2 -valued points induces a short exact sequence of Gal(Q 2 /Q 2 )-modules 

0 A[2 r ]» m (Q 2 ) - J„(2Af)[2']° m (Q 2 ) B[2']° m (Q 2 ) 0, (5) 

which is a subexact sequence of the short exact sequence of Gal(Q 2 /Q 2 )-modules 

0 - A[2 r ] m (Q 2 ) - J 0 (2A)[2”] m (Q 2 ) ^ S[2 r ] m (Q 2 ) ^ 0. (6) 

Let A[2 r ] m (Q 2 ) x (respectively J 0 (2A)[2 r ] m (Q 2 ) x , respectively P[2 r ] m (Q 2 ) x ) denote the 
maximal Gal(Q 2 /Q 2 )-subrepresentation of A[2 r ] m (Q 2 ) (respectively J 0 (2A)[2 r ] m (Q 2 ), re¬ 
spectively 5[2 r ] m (Q 2 )) on which the inertia group acts through the 2-adic cyclotomic char¬ 
acter x- The short exact sequence Q induces an exact sequence 

0 - A[2 r ] m (Q 2 ) x ^ J 0 (2N) [2 r ] m (Q 2 ) x i?[2”] m (Q 2 ) x . (7) 
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3.16 Lemma. Each of the groups schemes appearing in the exact sequence n is of mul¬ 
tiplicative type, and the exact sequences m and 0 coincide (as subsequences of (E^- 

Proof. We first remark that © is the exact sequence of T m [Gal(Q 2 /Q 2 )]-modules 
underlying the the corresponding exact sequence of T m [Gal(Q/Q)]-modules 

0 - A[2 r ] m (Q) - J 0 (2N) [2 r ] m (Q) - 5[2 r ] m (Q) - 0. 

Since p is assumed irreducible as a k [Gal(Q/Q)]-representation, each of the modules ap¬ 
pearing in this exact sequence is a successive extension of copies of p. The same is thus 
true of each of the modules appearing in the exact sequence ©• 

Since A has purely toric reduction, it is clear that A[2 r ]° i//Z) is of multiplicative type, 
and so 

A[ 2l° m (Q 2 ) C A[2 r ] m m x - (8) 

Fix a hltration 0 = Wq C W\ C C W n = A[2 r ] m (Q 2 ) of A[2 r ] m (Q 2 ) for which the 
successive quotients W l+ \ / W t are isomorphic to p. Since A has purely toric reduction the 
quotient A[2 r ]/Q 2 /h4[2 r ]° Q2 is Cartier dual to A[2 r ]° Q2 (where A is the dual abelian variety 

to A), and so A[2 r ] m (Q 2 )/h4[2 r ](( l (Q 2 ) is an unramified Gal(Q 2 /Q 2 )-representation. Since 
p is assumed ramified at 2, this implies that 

H'- +1 f)^[2']» m (Q 2 ) C W,f|42X(Q 2 ) 

for each i > 0. Furthermore, 

W t ^[2 r ]m(Q 2 ) X 

for each i > 0, because x mod 2 is trivial. Since W i+ \/Wi = p is two dimensional over k 
for each i > 0, we conclude by induction on i that 

ivfpPTJQj) = w,f>[2'UQ 2 ) x 

for each i > 0. Taking i — n then shows that the inclusion © is in fact an equality. 

Since B has good reduction at 2, we have equality FB[ 2 r ]/z 2 = B[ 2 r ’]/z 2 - As noted 
above, any Jordan-Holder hltration of the localization F>[2 r ] m (Q) as a T[Gal(Q/Q)]- 
modulc has all its associated graded pieces isomorphic to p. Taking scheme-theoretic 
closures of such a hltration in 5[2 r ]/z 2) we obtain a hltration of the localization B[ 2 r ’] m /z 2 
by hnite hat closed subgroup schemes, whose associated graded pieces are prolongations of 
p. Now lernrna l?).14l shows that the connected component of any such hnite hat prolongation 
is multiplicative. Thus B[ 2 r ]^/ z . ) is indeed multiplicative, whilst 5[2 r ] m (Q 2 )/i?[2 r ]^(Q 2 ) 
is an unramihed Gal(Q 2 /Q 2 )-module. Arguing as in the preceding paragraph gives the 
required equality 

B[2Y„(Q 2 ) = -B[2"UQ 2 )*. 

Since any extension of multiplicative type groups is again of multiplicative type, we 
see that Jo(2N)[2 r ]^ Zi is also of multiplicative type, and that the exact sequence © is 
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a subsequence of the exact sequence ©. We have furthermore shown that first and third 
non-trivial terms of these two sequences coincide. This implies that these exact sequences 
do indeed coincide. □ 

Specializing lemma, PT. 1 01 to the case r = 1 shows that Jo(2iV)[2]^(Q 2 ) is the maximal 
unramified Gal(Q 2 /Q 2 )-subrepresentation of J 0 (2iV)[2] m (Q 2 ) (since x mod 2 is trivial). 
Recall that there is a natural isomorphism Ta,n(J 0 (2At) [2]^) = Tan(J 0 (2N) ^ 2 ) (indeed, 

this is true with J 0 (2N) ^ replaced by any group scheme over F 2 ), and also a natural 
isomorphism Ta,n( J 0 (2N) [2]%^) = J 0 (2N)[2]°(Q 2 ) <g) F2 F 2 (as follows from the discussion 
on m P- 488]). Localizing at m, and taking into account [2H 1cm. 2.2], which is valid 
for p = 2, we find that Jo(2iV)[2]^(Q 2 ) is a cyclic T m -module, and thus that the maximal 
unramified Gal(Q 2 /Q 2 )-subrepresentation of Jo(2iV)[2] m (Q 2 ) is a cyclic T m -module. 

Let p m : Gal(Q/Q) —> GL 2 (T m ) denote the Galois representation associated to m by [HI 
thm. 3]. Carayol has proved 0 thm. 4] that there is an isomorphism Ta m Jo(2A r ) = J<8>T m Pm 
for some ideal J in T m , and thus an isomorphism J 0 (2iV)[2] m (Q 2 ) = (J/2J) ® Tm p m . We 
conclude that J/2J is a cyclic T m - module, and hence that J is a principal ideal in T m . 
The discussion of |5| 3.3.2] shows that in fact J = T m and that Ta m Jo(2iV) is free of rank 
two over T m , as claimed. □ 


3.17 Corollary. In the situation of theorem \3.1tA the completion T m is a Gorenstein 
Z 2 -algebra. 

Proof. This follows from the theorem together with the self-duality of the m-adic Tate 
module under the Weil pairing. □ 

We now prove our level lowering result. Let A be an Artinian ring with finite residue 
held k of characteristic 2, and suppose given a continuous representation p : Gal(Q/Q) —> 
GL 2 (A) that is modular of level To(2iV) for some odd natural number N, in the sense that it 
arises from a Hecke eigenform h G S' 2 (T 0 (2A^), A). Let p denote the residual representation 
attached to p (so p arises from the Hecke eigenform h G S' 2 (T 0 (2A^), k ) obtained by reducing 
h modulo the maximal ideal of A). 

3.18 Theorem. If p : Gal(Q/Q) —> GL 2 (A) is a modular Galois representation of level 
T 0 (2iV) as above, such that 

1. p is ( absolutely ) irreducible, 

2. p is ordinary and ramified at 2, and 

3. p is finite flat at 2, 

then p arises from an A-valued Hecke eigenform of level N. 
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Proof. The Hecke eigenform h corresponds to a ring homomorphism 0 : T —> A. Since 
A is local of residue characteristic 2, the map 0 factors through the completion T m of T 
at some maximal ideal m of residue characteristic 2, and the residual representation p is 
the residual Galois representation attached to the maximal ideal m. We let p m denote the 
Galois representation 

p m : Gal(Q/Q) —> GL 2 (T m ) 

attached to m by H3 thm. 3]. The Galois representation p attached to h coincides with the 
pushforward of p m via 0. 

Replacing A by the image of 0, we may and do assume from now on that 0 is sur¬ 
jective. We let / C T m denote the kernel of 0. Since A is Artinian, we may choose 
r > 1 so that 2 r e /. Theorem Em shows that the m-adic Tate module Ta m Jo(2iV) 
is isomorphic as a Gal(Q/Q)-representation to p m ; thus J 0 (2AQ[2 r ] m (Q) is isomorphic to 
the reduction mod 2 r of p m . Since T m is a Gorenstein Z 2 -algebra, by corollary 13.171 
we see that T m /2 r T m is a Gorenstein Z/2 n Z-algebra, and thus that there is an iso¬ 
morphism (T m /2 r T m )[/] = Hom z pr(T m //, Z/2 r ) of T m / 1 = A-modules. In particular, 
Jo(2IV)[/](Q/Q) C J 0 (2AQ [2 r ] m (Q) is a faithful A-module, isomorphic as an A[Gal(Q/Q)]- 
module to Hoinzp0T m //, Z/2 r ) p. To simplify notation, we will write 

1/ := J 0 (2N)[I] (Q) =* Hom z/2 r(T m //, Z/2 r ) ® A p. (9) 

By assumption, p prolongs to a finite flat group scheme A4 over SpecZ 2 . If we fix 
a Jordan-Holder filtration of p as an A [Gal (Q/Q) ]-mo dule, then the associated graded 
pieces are each isomorphic to p, and so lemma IH. 141 and fn, Prop. 2.5] together imply that 
A4 is uniquely determined by p, whilst 0 Lem. 2.4] then implies that A4 is naturally an 
A-module scheme. From 0 we see that V also prolongs to a finite flat A-module scheme 

V = Hom z/2 r(T ro //, Z/2 r ) M 

over Z 2 . Again, lemma 13.141 and [5] Prop. 2.5] show that V is the unique finite flat 
prolongation of V. 

Lemma lit. 141 furthermore implies that A4 is the extension of an etale A-module scheme 
M ct by a multiplicative A-module scheme Ad°, each of which is free of rank one as an 
A-module scheme. Thus V is also an extension of an etale A-module scheme V ct by mul¬ 
tiplicative A-module scheme V°, each of which is faithful as an A-module scheme. Let V ct 
and V° denote the generic fibres of these schemes. 

We write J to denote the Neron model of Jo(2AQ over Spec Z 2 . For a scheme over Z 2 , 
use the subscript “s” to denote its special fibre over F 2 . The special fibre J s admits the 
following filtration by T-invariant closed subgroups: 

OCTC0°C J s , 

where T is the maximal torus contained in J s , and J® is the connected component of 
the identity of J s . The quotient /T is an abelian variety on which T acts through its 
quotient T 0 id (where T 0 ia denotes the quotient of T that acts faithfully on the space of 
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2-old forms of level 2 N). The connected component group <3> := J s j Jf is Eisenstein j221 
Thm. 3.12], 

The following lemma provides an analogue in our situation of [221 lem. 6.2] (and gen¬ 
eralizes one step of the argument in the proof of [121 thm. 2.8]). 

3.19 Lemma. The Zariski closure of V in J is a finite flat A-module scheme over Z 2 
(which is thus isomorphic to V). 

Proof. Since V° is a multiplicative type group scheme, inertia at 2 acts on E°(Q 2 ) 
through the cyclotomic character, ft follows from lemma 13.161 that V° is contained in the 
generic fibre of J 0 (2N)[2 r ]^ Zi , and thus that the Zariski closure of V° in J is indeed finite 
flat, and in fact of multiplicative type. Thus it coincides with V°, and so we see that the 
embedding of V° in J 0 (2N) prolongs to an embedding of V° in J. Since the quotient 
V et = V/V° is etale, lemma 5.9.2 of |TB, Expose IX] serves to complete the proof of the 
lemma. □ 

Lemma Hi. 1 91 allows us to regard V as a closed T-submodule scheme of J , and thus to 
regard V s as a closed T-submodule scheme of J s . Since p is irreducible and $ is Eisenstein, 
we see that V s is in fact contained in Jfi. On the other hand, since T is a torus, we see that 
v.n t C V°. Thus Vf appears as a subquotient of /T, and in particular the T-action 
on V ct factors through the quotient T 0 id of T. Since Vf 1 is a faithful A-module scheme, we 
see that the map <f : T —> A factors through T 0 id, completing the proof of the theorem. 
□ 


We remark that the obvious analogue of theorem 13.181 in the case of odd residue char¬ 
acteristic is also true. The proof is similar but easier, relying on the uniqueness results on 
finite flat models due to Raynaud |2Ij. Of course, in those cases when the R = T theorem 
of Wiles, Taylor-Wiles, and Diamond [31231223 applies, it is an immediate consequence 
of that theorem. (Thus theorem 13. 1 81 mav be regarded as evidence for an R = T theorem 
for those p of residue characteristic 2 that satisfy its hypotheses.) 

4 Ns proper prime power 

There are only finitely many elliptic curves of conductor 2 k for all k, and we may explicitly 
determine which have odd modular degree. Therefore we assume that E has conductor N, 
where N = p k with k >2 and p > 3. Let y be the unique quadratic character of conductor 
p. Let E' be the elliptic curve E twisted by y. The curve E' also has conductor N, and 
moreover the associated modular forms f E and f E > are congruent modulo 2, since twisting 
by quadratic characters preserves E[ 2], Since N is odd, any non-trivial congruence modulo 
2 between f E and other forms in S , 2 (T 0 (iV)) forces the modular degree m E to be even 3D,. 
Thus we are done unless f E = f E ' — Ie ® X- bi particular, the representations associated 
to f E must be induced from a quadratic field, and thus E has complex multiplication. 
(Alternatively, the equality f E = f E > implies that E is isogenous to its twist and deduce 
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this way that E has CM.) If E has CM and prime power conductor then E is one of 
finitely many well known elliptic curves, for which we can directly determine the modular 
degree by consulting current databases (for N = 163 2 , we use the elliptic curve database 
of Stein-Watkins, described in [23]). 

5 Further remarks 

Certainly not every E satisfying the conditions of theorem 11.11 will actually have odd 
modular degree, and one could try to refine this result by deducing additional necessary 
conditions that E must satisfy in order to have odd modular degree. In this section we say a 
little about the related question of whether or not 2 is a congruence prime for the associated 
modular form /#, when E satisfies either of conditions (3a) or (3b) of the theorem. 

For curves E with a rational two torsion point, the modular form ff automatically sat¬ 
isfies a mod two congruence with an Eisenstein series, and so detecting whether / satisfies 
a congruence with a cuspform is a more subtle phenomenon than in the non-Eisenstein 
situation. One approach might be to relate the Hecke algebra to an appropriate universal 
deformation ring (if the latter exists). If N is prime this can be done j^j, and this enables 
one to determine when T m = Z 2 for such representations. The specific determination of 
when T m = Z 2 , however, was already achieved (for N prime and p reducible) by Merel in 

123: 

5.1 Theorem. Let N = 1 mod 8 be prime, and let T m be the localization of the Eisenstein 
prime at 2. Then T m ^ Z 2 if and only if N = u 2 + 16u 2 and v = (N — l)/8 mod 2. 

If E is a Neumann-Setzer curve, then N = u 2 + 64 for some u G Z. The result of Merel 
above then clearly implies that the optimal Neumann-Setzer curve E has odd modular 
degree if and only if N ^ 1 mod 16. (An alternative proof of this fact, relying on the 
results of Pi, is given in EH, thm. 2.1.) If E has composite conductor, then one might 
try to generalize the results of 123 or 0 to this setting. 

Suppose now that E has prime conductor, that p is irreducible and supersingular, and 
that Q(l?[2]) is totally complex. Let K and L be the extensions of Q attached to E 
as in the discussion of section 01 If one had an R = T result of the type discussed in 
the introduction, then to obtain further necessary conditions for E to have odd modular 
degree, it would suffice to establish sufficient conditions for the existence of an appropriate 
non-trivial minimal deformation p : G q —> GL 2 (F 2 [a;]/(x 2 )) lifting p. For representations 
p that were complex and ramified at 2, but ordinary, we constructed such a p directly 
in subsection 13.101 by considering a quadratic genus field extension of L. When E is 
supersingular, such deformations p (when they exist) may be more subtle and can not 
necessarily be constructed so directly. One can however prove the following result. 

Recall that if p is supersingular and totally complex, then A"/Q is totally ramified at 2 
and K has exactly two complex embeddings. 

5.2 Proposition. Suppose p is supersingular at 2 and totally complex. If either: 
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1. the class number of K is even, or 

2. the fundamental unit e of Ok satisfies v n (e — 1) > 2, where 7r is the unique prime 
above 2 in Ok, 

then there exists a non-trivial minimal deformation 

p:Gal(Q/Q)^SL 2 (F 2 [a;]/(x 2 )). 

Note that SL 2 (F 2 [a;]/(x 2 )) = S 4 x Z/2Z. The idea behind the proof of this result is 
to study A 4 extensions H containing L that are minimally ramified at 2 and unramified 
at N. Such extensions can be obtained by considering the Galois closure over Q of certain 
quadratic extensions of K. One obtains a suitable such extension either by considering an 
unramified extension of K , in case (1), or the extension K(^/ck), in case (2). 
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